Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File:                     HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier:          bLwM/b5p5FcDxwILQLb6HQ4d9vOW5OUljE81BLAMR4Y=
Subject key identifier:   EB:3F:A8:4D:F2:44:FB:48:24:B0:B9:BC:88:33:FF:0A:A9:06:3E:FF
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       018F3BF8CF35B62ABF996CB7F1937C6D163D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number:          1159
Signing time:             Fri 03 May 2024 01:01:52 +0000
Manifest this update:     Fri 03 May 2024 01:01:52 +0000
Manifest next update:     Sat 04 May 2024 01:01:52 +0000
Files and hashes:         1: 5CKEZtH3uLy9SRlMQ57MpskZYEs.roa (hash: J6OMorRHOzQfmO1tlMpIWtazU3ejssByPUY62JOYZrc=)
                          2: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: +0VZVAYiSLpZEiLzjjiUp0aonfplb5gknDrkxodv8B0=)
                          3: JpNKOBx_p3lhExQwAR_p7h_Jwzc.roa (hash: ypGG1uTqd71fF7fUobZHhnkmxS6cqeEMGqmxU+v1QG4=)
                          4: LDnCYFKA9WagM_3zoPFw7uNawmM.roa (hash: vfVSm4x3iLurQWJGny/B6CWrglNuuyLEbQWkYfQYaK0=)
                          5: _2S0XRMREiedXlj3U3WRu3TYSIk.roa (hash: GrGzUYSx3J2z6O4qrykPsZ28kmdOE72IGtP7qFdoUFM=)
                          6: kc8ZX9_eEbSg733RFQ0i9pwoS68.roa (hash: sHWCNkdTepXYxZS8F5SUMdvEL6iETPAy6F9OGRCJ4wg=)
                          7: v85r47gS0-KR4ui2wKtWQKBN5VU.roa (hash: u+Bsn76b9199L+53EUaa6us3POQP/VbBY2V2SUGIsV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:cf:35:b6:2a:bf:99:6c:b7:f1:93:7c:6d:16:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: May  3 01:01:52 2024 GMT
            Not After : May  4 01:01:52 2024 GMT
        Subject: CN=eb3fa84df244fb4824b0b9bc8833ff0aa9063eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:0b:b2:12:8d:b8:9a:96:66:d0:f5:47:78:
                    a9:f8:a5:b3:e9:64:83:6f:05:56:43:ed:dd:df:30:
                    6a:40:d3:9e:fa:4a:94:f9:f7:f3:5b:a5:d0:12:67:
                    64:44:38:fa:85:2c:3b:3f:a3:64:a0:f7:1e:0f:e2:
                    e3:02:ac:f0:7c:c9:cd:40:4e:63:26:b7:3a:d0:90:
                    94:71:6e:cb:7f:1a:ff:f7:90:bf:c8:65:f7:ee:28:
                    7b:e2:95:43:ec:b4:7b:62:2b:68:a4:f6:ed:fb:79:
                    35:0f:1f:c2:6c:33:57:58:0f:02:cf:34:4f:f8:d0:
                    68:18:dd:9a:37:1a:1c:5b:2e:7d:56:8d:31:5a:81:
                    7f:44:8e:5a:69:3b:62:fb:1e:b3:3c:ea:97:75:26:
                    68:64:a6:f3:39:a2:c4:ae:5f:cb:1a:e3:39:09:f0:
                    21:7a:b4:8e:6f:24:5b:49:cb:dd:27:51:a1:eb:75:
                    92:b8:56:79:25:39:bc:a6:e8:d7:26:b6:0e:bf:b9:
                    84:d1:af:e7:e0:c6:49:02:ff:46:7c:5f:b9:d8:03:
                    da:eb:ac:a6:c1:47:7b:66:d8:61:02:54:10:eb:95:
                    e7:ae:e3:3f:59:f4:e3:45:12:8b:04:a1:5f:29:47:
                    0b:4d:c2:4c:fe:95:67:64:07:5c:0c:2f:a2:83:57:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3F:A8:4D:F2:44:FB:48:24:B0:B9:BC:88:33:FF:0A:A9:06:3E:FF
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:39:30:08:b9:e7:77:07:c4:ba:ec:21:28:bf:7b:53:7f:c0:
         08:2a:cc:7b:d6:88:bf:72:13:8c:9f:1d:1f:7a:7e:27:9b:01:
         75:8e:10:0c:8a:e0:c8:05:b4:68:b3:39:d2:15:a3:c8:9a:ec:
         64:20:bc:41:97:06:d8:52:3c:5d:d0:44:e6:22:fd:f9:a2:b4:
         78:7f:3e:96:10:36:27:fd:b4:a4:07:01:4d:ee:1a:82:78:20:
         74:ef:07:64:ef:ac:65:b9:6b:6f:4d:2e:8d:75:cf:46:04:b1:
         73:8c:bf:df:37:a5:0f:8b:cf:df:db:34:d8:c6:08:84:74:2d:
         b8:13:96:4a:51:d4:fd:ba:b6:40:b9:cd:11:33:c9:65:07:74:
         2e:57:86:bf:b2:6d:e2:df:8f:7d:99:13:2b:83:1b:44:17:7f:
         a4:4e:28:f1:e4:3e:7c:d6:bf:8d:27:35:1a:7c:c3:24:38:c3:
         c4:0c:60:11:c8:e9:36:04:89:76:82:8c:65:c4:ad:d1:a9:e3:
         6a:3e:65:7a:5c:d6:83:c4:ad:05:4d:46:3f:b6:86:14:08:3b:
         8f:49:e5:72:10:cb:b5:f8:7e:85:f7:62:3f:69:d5:37:c9:ab:
         d2:52:99:86:77:32:06:00:7b:8b:44:6b:cf:a6:91:46:de:55:
         24:37:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:24:38 2024 by rpki-client on console-fra.rpki-client.org